Privacy policy

Last updated: 16 August 2026. This page describes current product behavior. It is not a claim of HIPAA or any other formal compliance certification.

Who we are

Optigram (www.optigram.app) is a GoHighLevel Marketplace app that relays opted-in Telegram conversations into a location’s GHL inbox. Studio brand: nabour.ca. Contact: support@optigram.app.

What we process

• GoHighLevel OAuth access and refresh tokens for each installed location (encrypted at rest with AWS KMS).
• The Telegram bot token the agency pastes (encrypted at rest with AWS KMS), plus bot username and webhook secret.
• Contact mappings: GHL contact id, Telegram chat id, username/handle, opt-in time and source.
• Message metadata in our logs (direction, status, ids). We do not store Telegram or GHL message bodies in messages_log.
• If you email support, the contents of that correspondence.

We do not operate a public waitlist or marketing lead form on this site.

Why

Tokens and mappings exist so the channel can deliver inbound and outbound messages after a lead opts in. Opt-in source and timestamp are kept so consent is auditable. We do not use Telegram to cold-message people who have not started the bot.

Processors

Infrastructure runs on Amazon Web Services. Conversation content also flows through GoHighLevel and the Telegram Bot API under those providers’ terms. Analytics, if enabled on this marketing host only, uses Google Analytics 4 with cookies scoped to the marketing hostname (not .optigram.app), so they do not ride on app. or api. requests. The admin dashboard is noindexed and does not load that analytics snippet.

Retention and deletion

Uninstalling Optigram in GoHighLevel disables the location: the Telegram webhook is removed and both inbound and outbound relay stop. To request deletion of mappings, tokens, and associated logs for a location, email support@optigram.app from an address we can associate with the install (see Support & data). A GHL contact-delete webhook that purges a single mapping automatically is planned; until it ships, ask us (or delete the contact mapping via uninstall + a deletion request).

Cookies

This marketing site may set a Google Analytics cookie on the marketing hostname only, and only when a measurement id is configured. The dashboard at app.optigram.app uses a first-party session cookie for standalone (non-iframe) visits; the GHL embed uses a bearer token in session storage instead.